KR102445583B1 - Apparatus for authenticating and method thereof - Google Patents

Abstract

The present invention relates to an authentication device and method. According to a first aspect of the present invention, an authentication device for performing authentication for a service requiring identity authentication includes an authentication key generator generating an authentication key based on customer information of a customer, and sending a mail including the generated authentication key. It is possible to increase security in authentication by including a mail sending request unit for processing, a terminal communication unit for receiving an authentication key from a terminal of a customer who has received the mail, and an authentication performing unit for performing authentication based on the authentication key.

Description

APPARATUS FOR AUTHENTICATING AND METHOD THEREOF

The present invention relates to an authentication apparatus and method, and more particularly, to an authentication apparatus and method for performing identity authentication using a postal mail.

An identity authentication service in which a user is authenticated as a user is being used in the field of online services using the Internet, such as online commerce and Internet banking. In this information age, since a large amount of data is distributed all over the world through communication networks, the importance of identity authentication for authenticating users is more important to prevent property damage and invasion of privacy that may occur due to leakage of personal information due to hacking, etc. is being highlighted.

There are methods such as written authentication, wired Internet accredited certificate, card authentication, etc. as the authentication method. As a prior art related to such personal authentication, there is Korean Patent Application Laid-Open No. 10-2009-0100647.

However, this prior art has a problem in that it is difficult for a user who does not have or cannot use a mobile phone to perform identity authentication because a mobile phone or a phone to which a phone number is assigned is essential for authentication.

Therefore, in recent years, there is a demand for an apparatus and method for solving these problems.

On the other hand, the above-mentioned background art is technical information that the inventor possessed for the derivation of the present invention or acquired in the process of derivation of the present invention, and it cannot be said that it is necessarily a known technique disclosed to the general public before the filing of the present invention. .

An embodiment of the present invention aims to provide an authentication apparatus and method.

As a technical means for achieving the above-described technical problem, according to a first aspect of the present invention, an authentication device for performing authentication for a service requiring identity authentication is an authentication key generating unit that generates an authentication key based on customer information of a customer. , a postal sending requesting unit for sending out mail including the generated authentication key, a terminal communication unit receiving the authentication key from a terminal of a customer who has received the mail, and performing authentication based on the authentication key includes wealth.

According to a second aspect of the present invention, a method for an authentication device performing authentication for a service requiring identity authentication to perform authentication includes the steps of generating an authentication key based on customer information of a customer, including the generated authentication key performing postal mail sending processing; receiving the authentication key from a terminal of a customer who has received the mail; and performing authentication based on the authentication key.

According to a third aspect of the present invention, the present invention is a computer-readable recording medium in which a program for performing a method for performing authentication by an authentication device performing authentication for a service requiring identity authentication is recorded, and performing the authentication. The method includes the steps of generating an authentication key based on customer information of a customer, performing a mailing process including the generated authentication key, receiving the authentication key from a terminal of the customer who has received the mail, and the and performing authentication based on the authentication key.

According to a fourth aspect of the present invention, the present invention is a computer program stored in a recording medium for performing a method for an authentication device that performs authentication for a service requiring identity authentication to perform authentication, the method for performing the authentication comprises: , generating an authentication key based on customer information of the customer, performing a sending process of mail including the generated authentication key, receiving the authentication key from a terminal of the customer who has received the mail, and the authentication and performing authentication based on the key.

According to any one of the problem solving means of the present invention described above, the authentication apparatus and method of the present invention can be provided.

In addition, according to any one of the problem solving means of the present invention, by performing authentication through mail, authentication can be performed even when authentication cannot be performed according to the generalized e-mail authentication or mobile phone authentication method.

In addition, according to any one of the problem solving means of the present invention, since the authentication key is delivered to the customer to the address confirmed through a public trustworthy institution, even if the authentication key is stolen, CCTV investigations are possible, so security in delivery of the authentication key is possible. can increase

The effects obtainable in the present invention are not limited to the above-mentioned effects, and other effects not mentioned may be clearly understood by those of ordinary skill in the art from the following description. will be.

1 is a block diagram of an authentication system according to an embodiment of the present invention.
2 is a block diagram illustrating an authentication apparatus according to an embodiment of the present invention.
3 is a flowchart illustrating an authentication method according to an embodiment of the present invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art can easily carry out the present invention. However, the present invention may be embodied in several different forms and is not limited to the embodiments described herein.

And in order to clearly explain the present invention in the drawings, parts irrelevant to the description are omitted, and similar reference numerals are attached to similar parts throughout the specification.

Throughout the specification, when a part is "connected" with another part, this includes not only the case of being "directly connected" but also the case of being "electrically connected" with another element interposed therebetween. . Also, when a part "includes" a certain component, it means that other components may be further included, rather than excluding other components, unless otherwise stated.

Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram of an authentication system according to an embodiment of the present invention.

An authentication system according to an embodiment of the present invention includes an authentication device 100 for performing identity authentication for a customer. For a service that requires user authentication, the authentication device 100 may perform authentication based on an authentication key. The service requiring identity authentication according to an embodiment of the present invention is provided by a business operator operating the authentication device 100 . In addition to the service provided, it may include a service provided by a separate operator. In addition, the present invention can be applied regardless of the contents of the service. For example, the present invention can be applied even when the content of the service is a game or the content of the service is an SNS.

Meanwhile, in performing authentication, the authentication device 100 may use a password preset by the customer, or may use a delivery result of a delivery institution such as a post office.

The authentication system according to an embodiment of the present invention may further include a customer terminal 200 that is a terminal used by a customer requesting authentication.

The authentication system according to an embodiment of the present invention may further include a post office server 300 for sending mail to a customer based on a request from the authentication device 100 . In particular, the post office server 300 may send mail sent to the customer in a manner requested by the authentication device 100 .

Each of the components 100, 200, and 300 of the authentication system is implemented as a computer or portable terminal, television, wearable device, etc. that can be connected to a remote server through the network N, or connected to other terminals and servers. can be Here, the computer includes, for example, a laptop, a desktop, and a laptop equipped with a web browser, and the portable terminal is, for example, a wireless communication device that ensures portability and mobility. , PCS (Personal Communication System), PDC (Personal Digital Cellular), PHS (Personal Handyphone System), PDA (Personal Digital Assistant), GSM (Global System for Mobile communications), IMT (International Mobile Telecommunication)-2000, CDMA (Code) All kinds of handhelds such as Division Multiple Access)-2000, W-Code Division Multiple Access (W-CDMA), Wireless Broadband Internet (Wibro), Smart Phone, Mobile Worldwide Interoperability for Microwave Access (WiMAX), etc. It may include a (Handheld)-based wireless communication device. In addition, the television may include IPTV (Internet Protocol Television), Internet TV (Internet Television), terrestrial TV, cable TV, and the like. Furthermore, the wearable device is, for example, a type of information processing device that can be worn directly on the human body, such as watches, glasses, accessories, clothes, shoes, etc. can be connected with

The network (N) includes a local area network (LAN), a wide area network (WAN), a value added network (VAN), a personal area network (PAN), a mobile communication network ( Mobile radio communication network), Wibro (Wireless Broadband Internet), Mobile WiMAX, HSDPA (High Speed Downlink Packet Access) satellite communication network, LTE (long term evolution) network, etc. may be implemented in all kinds of wired/wireless networks.

Next, each configuration of the authentication apparatus 100 according to an embodiment of the present invention will be described with reference to FIG. 2 .

2 is a block diagram illustrating an authentication apparatus 100 according to an embodiment of the present invention.

The authentication apparatus 100 according to an embodiment of the present invention includes a terminal communication unit 110 that communicates with the customer terminal 200 .

The terminal communication unit 110 according to an embodiment of the present invention may receive an authentication key from the customer terminal 200, and in particular, the terminal communication unit 110 receives the authentication key input by the customer through the authentication page previously provided to the customer. You may. According to an embodiment of the present invention, the authentication page may be previously provided by the terminal communication unit 110 to the customer terminal 200 . The customer may input predetermined information into the authentication page through the terminal 200 , and the input information may be received by the terminal communication unit 110 .

In addition, the terminal communication unit 110 may receive customer information from the customer. In this case, the customer may transmit customer information to the terminal communication unit 110 through the customer terminal 200 .

The authentication apparatus 100 according to an embodiment of the present invention may further include an authentication key generator 120 that generates an authentication key based on customer information. Customer information according to an embodiment of the present invention may include at least one of the customer's name, address, and date of birth. The authentication key generation unit 120 may generate an authentication key by processing at least one of the customer's name, address, and date of birth according to a preset method.

The authentication apparatus 100 according to an embodiment of the present invention may further include a sending method determining unit 130 that determines a sending method of a mail including an authentication key.

The sending method determining unit 130 according to an embodiment of the present invention may determine the sending method of the mail based on the type of service requiring identity authentication. Meanwhile, the sending method determining unit 130 may classify an authentication level for each service according to the strength of authentication required for a service requiring identity authentication, and the sending method determining unit 130 may perform authentication based on the classified authentication level. You can decide how

The sending method determining unit 130 may determine to deliver the mail in the order of general mail delivery, registered mail delivery, and personal designated delivery as the strength of authentication required for a service required for identity authentication is greater.

For example, when the strength of authentication required by the service is strong by handling contents that require security, such as personal information, in the service, such as membership registration, the sending method determining unit 130 may deliver the mail by the method designated by the user. can decide what

In addition, when the strength of authentication required by the service is weak because the service does not handle content that requires security, such as personal information, such as changing a nickname used within the service, the sending method determining unit 130 delivers the mail by regular mail You can decide to deliver in the way of

In addition, when the strength of authentication required for the service is medium by handling only limited personal information in the corresponding service, such as changing member information, the sending method determining unit 130 may determine to deliver the mail by a registered mail delivery method.

The authentication apparatus 100 according to an embodiment of the present invention may further include a mail sending request unit 140 that processes the mail to be sent to the customer based on the determined sending method.

The postal sending request unit 140 may request that the postal mail including the authentication key be sent to the customer based on the determined sending method to the post office server 300 . The post office server 300 may receive the authentication key from the postal sending requesting unit 140 together with the sending request of the postal mail. According to an embodiment of the present invention, since the authentication key is delivered to the customer to an address confirmed through a publicly trusted institution such as the post office, even if the authentication key is stolen, CCTV investigations are possible, thereby increasing security in delivery of the authentication key. .

The authentication apparatus 100 according to an embodiment of the present invention may further include an authentication performing unit 150 that performs identity authentication based on an authentication key.

The authentication performing unit 150 according to an embodiment of the present invention may authenticate the corresponding customer based on the authentication key received from the customer. The customer can request authentication of himself/herself from the authentication performing unit 150 by inputting the authentication key included in the mail into the previously provided authentication page, and the authentication performing unit 150 determines that the authentication key is based on the customer information of the customer. By determining whether it has been created, the customer can be authenticated.

At this time, the authentication performing unit 150 may receive an authentication password from the customer, and when the received authentication password and the authentication password entered by the customer input customer information match, authentication may be performed. According to an embodiment of the present invention, since the authentication key is included in the mail and sent, if a family member or cohabiting person receives the mail and uses it, the authentication key may be stolen. Therefore, according to the present invention, the authentication key can be prevented from being stolen by family members or cohabitants by using the authentication password.

In addition, the authentication performing unit 150 may compare the mailing method determined by the sending method determining unit 130 with the actual mailing method, and perform authentication when the two match. In this case, the method in which the mail is actually sent may be received through the post office server 300 .

Next, an authentication method according to an embodiment of the present invention will be described with reference to FIG. 3 .

3 is a flowchart illustrating an authentication method according to an embodiment of the present invention.

The authentication method according to the embodiment shown in FIG. 3 includes steps that are time-series processed by the authentication device 100 shown in FIG. 2 . Accordingly, even if omitted below, the above description regarding the authentication apparatus 100 illustrated in FIG. 2 may also be applied to the authentication method according to the embodiment illustrated in FIG. 3 .

The authentication device 100 generates an authentication key based on the customer information of the customer (S301). Customer information according to an embodiment of the present invention may include at least one of the customer's name, address, and date of birth. The authentication device 100 may generate an authentication key by processing at least one of the customer's name, address, and date of birth according to a preset method. In this case, the customer information may be received from the customer terminal 200 .

The authentication apparatus 100 may perform the sending process of the mail including the authentication key (S303). The authentication apparatus 100 may determine a mailing method based on the type of service requiring identity authentication, and may perform mailing processing based on the determined authentication method.

The authentication apparatus 100 may determine to deliver the mail in the order of designated delivery, registered mail delivery, and general mail delivery as the strength of authentication required for a service required for identity authentication is greater.

The authentication device 100 may receive an authentication key from the customer terminal 200 that has received the mail (S305). The customer may request the authentication device 100 to authenticate himself by inputting the authentication key included in the mail into the authentication page previously provided from the authentication device 100 . The authentication device 100 may also receive the authentication password from the customer terminal 200 at this time.

The authentication apparatus 100 performs authentication based on the authentication key (S307). The authentication device 100 may authenticate the customer by determining whether the authentication key is generated based on customer information of the customer.

In addition, the authentication device 100 may perform authentication when the authentication password received together and the authentication password input by the customer when inputting customer information match.

In addition, the authentication apparatus 100 may compare the method of sending mail determined by the authentication apparatus 100 with the method in which the mail is actually sent, and may perform authentication when the two match. In this case, the method in which the mail is actually sent may be received through the post office server 300 .

Functions provided in components and '~ units' may be combined into a smaller number of components and '~ units' or separated from additional components and '~ units'.

In addition, components and '~ units' may be implemented to play one or more CPUs in a device or secure multimedia card.

The authentication method according to the embodiment described with reference to FIG. 3 may also be implemented in the form of a recording medium including instructions executable by a computer, such as a program module executed by a computer. Computer-readable media can be any available media that can be accessed by a computer and includes both volatile and nonvolatile media, removable and non-removable media. Also, computer-readable media may include both computer storage media and communication media. Computer storage media includes both volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. Communication media typically includes computer readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave, or other transport mechanism, and includes any information delivery media.

Also, the authentication method according to an embodiment of the present invention may be implemented as a computer program (or computer program product) including instructions executable by a computer. The computer program includes programmable machine instructions processed by a processor, and may be implemented in a high-level programming language, an object-oriented programming language, an assembly language, or a machine language. . In addition, the computer program may be recorded in a tangible computer-readable recording medium (eg, a memory, a hard disk, a magnetic/optical medium, or a solid-state drive (SSD), etc.).

Accordingly, the authentication method according to an embodiment of the present invention may be implemented by executing the above-described computer program by a computing device. The computing device may include at least a portion of a processor, a memory, a storage device, a high-speed interface connected to the memory and the high-speed expansion port, and a low-speed interface connected to the low-speed bus and the storage device. Each of these components is connected to each other using various buses, and may be mounted on a common motherboard or mounted in any other suitable manner.

Here, the processor may process commands within the computing device, such as for displaying graphic information for providing a Graphical User Interface (GUI) on an external input or output device, such as a display connected to a high-speed interface. Examples are instructions stored in memory or a storage device. In other embodiments, multiple processors and/or multiple buses may be used with multiple memories and types of memory as appropriate. In addition, the processor may be implemented as a chipset formed by chips including a plurality of independent analog and/or digital processors.

Memory also stores information within the computing device. As an example, the memory may be configured as a volatile memory unit or a set thereof. As another example, the memory may be configured as a non-volatile memory unit or a set thereof. The memory may also be another form of computer readable medium such as, for example, a magnetic or optical disk.

In addition, the storage device may provide a large-capacity storage space to the computing device. The storage device may be a computer-readable medium or a component comprising such a medium, and may include, for example, devices or other components within a storage area network (SAN), a floppy disk device, a hard disk device, an optical disk device, Alternatively, it may be a tape device, a flash memory, or other semiconductor memory device or device array similar thereto.

The foregoing description of the present invention is for illustration, and those of ordinary skill in the art to which the present invention pertains can understand that it can be easily modified into other specific forms without changing the technical spirit or essential features of the present invention. will be. Therefore, it should be understood that the embodiments described above are illustrative in all respects and not restrictive. For example, each component described as a single type may be implemented in a distributed manner, and likewise components described as distributed may also be implemented in a combined form.

The scope of the present invention is indicated by the following claims rather than the above detailed description, and all changes or modifications derived from the meaning and scope of the claims and their equivalent concepts should be interpreted as being included in the scope of the present invention. do.

100: authentication device 110: terminal communication unit
120: authentication key generating unit 130: sending method determining unit
140: mail sending request unit 150: authentication execution unit
200: customer terminal 300: post office server

Claims (13)

In the authentication device for performing authentication for a service requiring identity authentication,
an authentication key generator for generating an authentication key based on customer information of the customer;
a sending method determining unit that determines a mailing method according to the strength of authentication required for the service requiring identity authentication, but determines the methods of regular mail delivery, registered mail delivery, and personal designated delivery;
a postal mail sending requesting unit for requesting a post office server to send mail including the generated authentication key so that the mail can be sent based on the determined sending method;
a terminal communication unit for receiving the authentication key from the terminal of the customer who has received the mail; and
and an authentication performing unit for performing authentication based on the authentication key. According to claim 1,
The mail sending request unit additionally,
and an authentication device for performing a sending process of the postal matter based on the determined sending method. delete 3. The method of claim 2,
The sending method determining unit additionally,
As the strength of authentication required for the service requiring the identity authentication is greater, the authentication device determines to deliver the mail in the order of regular mail delivery, registered mail delivery, and identity-designated delivery. delete According to claim 1,
The authentication performing unit additionally,
An authentication device for performing authentication by comparing the determined sending method of the mail and the method in which the mail is actually sent and matching. According to claim 1,
The terminal communication unit additionally,
An authentication device for receiving the authentication key through an authentication page previously provided to the customer's terminal. 8. The method of claim 7,
The terminal communication unit additionally,
Receive an authentication password together with the authentication key,
The authentication performing unit additionally,
An authentication device that performs authentication when the authentication password matches the password specified by the customer. According to claim 1,
The authentication key generating unit,
An authentication device for generating an authentication key by processing at least one of a name, an address, and a date of birth included in the customer information according to a preset method. In the method of performing authentication by an authentication device that performs authentication for a service requiring identity authentication,
generating an authentication key based on customer information of the customer;
The method of sending mail is determined according to the strength of authentication required for the above-mentioned service requiring identity authentication, but the method of regular mail delivery, registered mail delivery, and personal-designated delivery is determined, and the processing of sending mail including the generated authentication key is performed. , performing a request to a post office server so that the mail can be sent based on the determined sending method;
receiving the authentication key from the terminal of the customer who has received the mail; and
and performing authentication based on the authentication key. delete A computer-readable recording medium in which a program for performing the method according to claim 10 is recorded. A computer program stored in a recording medium for performing the method according to claim 10, which is performed by the authentication device.

Images